$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json) Hash identifier: tJVPkUpdMT3B+SeTfcsMQPNJDvSxQRmlYalBAQRUg0c= Subject key identifier: A6:85:3A:9D:01:89:1F:17:6C:43:0F:93:5D:1C:EE:4F:B4:77:62:5B Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft Manifest number: 0133 Signing time: Wed 05 Nov 2025 04:42:47 +0000 Manifest this update: Wed 05 Nov 2025 04:42:47 +0000 Manifest next update: Wed 12 Nov 2025 04:42:47 +0000 Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: fDH2RPGVMxZ25f2CDLoapQlto0LzgeZ3Q8taXplsQYU=) 2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Validity Not Before: Nov 5 04:42:47 2025 GMT Not After : Nov 12 04:42:47 2025 GMT Subject: CN=690ad5c7-30a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:5f:88:c7:79:c8:0c:af:d9:56:6d:5d:0c: 42:96:df:04:1c:7b:c4:9c:05:34:c9:cd:b7:32:57: 45:fe:95:86:44:46:d4:b0:aa:5b:b0:70:a5:dc:1b: ea:e1:1e:ba:d2:4a:52:14:40:6c:ef:ca:51:d3:0b: 77:85:4f:34:0d:74:af:71:b6:3c:09:ae:e0:81:45: c9:15:20:fc:b0:fc:5a:e4:d5:1e:88:8e:a3:2a:a7: d7:c2:64:53:b3:03:78:30:8b:18:98:81:3f:05:85: b7:c5:da:03:58:46:53:d7:5c:4c:78:58:94:b2:f1: b7:7a:8f:79:22:ad:9e:53:88:8f:87:8b:1a:15:4c: 13:3b:e6:29:50:91:77:b8:9a:f3:58:e6:b0:6e:76: 69:9c:29:07:1d:0d:9d:71:81:8e:2d:d4:1a:d6:30: a3:54:33:ea:a2:f2:11:d0:aa:53:d9:d8:b7:a6:dd: 62:14:18:b0:fc:55:0f:85:f1:48:44:f2:da:bf:6d: 25:d5:bc:c6:04:87:09:66:fd:b8:c9:2b:85:76:33: 1b:bc:eb:69:d3:d7:64:06:a8:5c:c3:84:68:31:41: 28:06:40:8a:e2:fc:e4:5d:92:4e:55:06:91:a7:5b: 4f:e0:df:3d:69:8c:da:ad:f4:78:05:13:0b:e0:df: 57:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:85:3A:9D:01:89:1F:17:6C:43:0F:93:5D:1C:EE:4F:B4:77:62:5B X509v3 Authority Key Identifier: keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:05:dd:fa:a3:62:71:46:60:c9:cf:9e:a0:cc:e9:1f:18:8d: 92:0a:4f:6e:ae:b9:0f:75:65:6d:b1:a6:e5:7a:5e:2c:3c:67: 1f:d3:10:13:a5:f0:26:33:b6:99:d4:7d:df:ac:91:d6:a8:4d: b8:bf:4e:95:0d:ce:32:ba:08:a6:9c:ba:3f:e8:f3:fb:97:fa: 7e:9f:49:e3:a0:a6:6c:7b:92:e7:10:ba:0a:17:55:ad:d6:0e: 44:d6:87:d9:d8:96:5f:eb:fe:44:eb:b5:31:0b:ce:0d:d5:8d: 04:c0:2a:30:66:4a:a3:95:d1:65:24:97:e4:68:fb:5b:bb:c1: 64:09:ec:e1:1e:1c:6d:71:8b:13:49:6e:e7:73:67:51:31:e3: 20:f2:dd:24:e7:91:a1:3e:d0:8e:99:4d:33:f4:e8:1d:a9:52: 5c:1e:57:6a:18:64:a4:88:b4:45:9f:55:90:95:c4:16:61:88: 4e:f3:d0:8f:1d:dc:5e:f1:97:17:57:37:8c:37:fd:31:64:3a: 51:6d:26:5c:e2:52:b4:91:9c:57:08:ca:e9:a0:ee:ef:06:b7: e2:3e:d4:b3:06:47:33:ba:9b:6a:0b:a4:b2:53:79:41:3c:a6: cb:af:95:1a:a0:37:c1:aa:42:91:d8:73:90:2b:92:9e:6e:47: 02:a0:82:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5 NUY3NUMzODkwHhcNMjUxMTA1MDQ0MjQ3WhcNMjUxMTEyMDQ0MjQ3WjAYMRYwFAYD VQQDEw02OTBhZDVjNy0zMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+BfiMd5yAyv2VZtXQxClt8EHHvEnAU0yc23MldF/pWGREbUsKpbsHCl3Bvq 4R660kpSFEBs78pR0wt3hU80DXSvcbY8Ca7ggUXJFSD8sPxa5NUeiI6jKqfXwmRT swN4MIsYmIE/BYW3xdoDWEZT11xMeFiUsvG3eo95Iq2eU4iPh4saFUwTO+YpUJF3 uJrzWOawbnZpnCkHHQ2dcYGOLdQa1jCjVDPqovIR0KpT2di3pt1iFBiw/FUPhfFI RPLav20l1bzGBIcJZv24ySuFdjMbvOtp09dkBqhcw4RoMUEoBkCK4vzkXZJOVQaR p1tP4N89aYzarfR4BRML4N9XBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaFOp0B iR8XbEMPk10c7k+0d2JbMB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUBd36o2JxRmDJz56gzOkfGI2SCk9urrkPdWVtsablel4sPGcf0xAT pfAmM7aZ1H3frJHWqE24v06VDc4yugimnLo/6PP7l/p+n0njoKZse5LnELoKF1Wt 1g5E1ofZ2JZf6/5E67UxC84N1Y0EwCowZkqjldFlJJfkaPtbu8FkCezhHhxtcYsT SW7nc2dRMeMg8t0k55GhPtCOmU0z9OgdqVJcHldqGGSkiLRFn1WQlcQWYYhO89CP Hdxe8ZcXVzeMN/0xZDpRbSZc4lK0kZxXCMrpoO7vBrfiPtSzBkczuptqC6SyU3lB PKbLr5UaoDfBqkKR2HOQK5KebkcCoIJO -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:51 2025 by rpki-client